A scan in which all flags are turned off

A scan in which certain flags are off

A scan in which all flags are on

A scan in which the packet size is set to zero

A scan with an illegal packet size

Which of the following statements about a zone transfer is correct? (Choose three.)

A zone transfer is accomplished with the DNS

A zone transfer passes all zone information that a DNS server maintains

A zone transfer can be prevented by blocking all inbound TCP port 53 connections

A zone transfer is accomplished with the DNS

A zone transfer is accomplished with the nslookup service

A zone transfer passes all zone information that a DNS server maintains

A zone transfer passes all zone information that a nslookup server maintains

A zone transfer can be prevented by blocking all inbound TCP port 53 connections

Zone transfers cannot occur on the Internet

Let's imagine three companies (A, B and C), all competing in a challenging global environment.Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B. How do you prevent DNS spoofing?

Install DNS logger and track vulnerable packets

What did the following commands determine?

That the true administrator is Joe

That the Joe account has a SID of 500

These commands demonstrate that the guest account has NOT been disabled

These commands demonstrate that the guest account has been disabled

That the true administrator is Joe

Issued alone, these commands prove nothing

Which definition among those given below best describes a covert channel?

Making use of a protocol in a way it is not intended to be used.

A server program using a port that is not well known.

Making use of a protocol in a way it is not intended to be used.

It is the multiplexing taking place on a communication link.

It is one of the weak channels used by WEP which makes it insecure

Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the command prompt, she types the following command. What is Eve trying to do?

Eve is trying to carry out a password crack for user Administrator

Eve is trying to connect as a user with Administrator privileges

Eve is trying to enumerate all users with Administrative privileges

Eve is trying to carry out a password crack for user Administrator

Eve is trying to escalate privilege of the null user to that of Administrator

Study the following log extract and identify the attack.

Unicode Directory Traversal Attack

Multiple Domain Traversal Attack

Unicode Directory Traversal Attack

The following is an entry captured by a network IDS. You are assigned the task of analyzing this entry.You notice the value 0x90, which is the most common NOOP instruction for the Intel processor. You figure that the attacker is attempting a buffer overflow attack.You also notice "/bin/sh" in the ASCII part of the output.As an analyst what would you conclude about the attack?

The attacker is attempting an exploit that launches a command-line shell

The buffer overflow attack has been neutralized by the IDS

The attacker is creating a directory on the compromised machine

The attacker is attempting a buffer overflow attack and has succeeded

The attacker is attempting an exploit that launches a command-line shell

As a securing consultant, what are some of the things you would recommend to a company to ensure DNS security?

Use split-horizon operation for DNS servers

Have subnet diversity between DNS servers

Use the same machines for DNS and other applications

Use split-horizon operation for DNS servers

Have subnet diversity between DNS servers

Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?

To illicit a response back that will reveal information about email servers and how they treat undeliverable mail

To determine who is the holder of the root account

To illicit a response back that will reveal information about email servers and how they treat undeliverable mail

A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network. What are some things he can do to prevent it? Select the best answers.

Use port security on his switches.

Use a tool like ARPwatch to monitor for strange ARP activity.

If you have a small network, use static ARP entries.

Use port security on his switches.

Use a tool like ARPwatch to monitor for strange ARP activity.

Use a firewall between all LAN segments.

If you have a small network, use static ARP entries.

Use only static IP addresses on all PC's.

Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers.Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?

Hardware, Software, and Sniffing.

Hardware and Software Keyloggers.

Passwords are always best obtained using Hardware key loggers.

Software only, they are the most effective.

What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?

All are hacking tools developed by the legion of doom

All are tools that can be used not only by hackers, but also security personnel

All are tools that are only effective against Windows

All are tools that are only effective against Linux

How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?

The right most portion of the hash is always the same

There is no way to tell because a hash cannot be reversed

The right most portion of the hash is always the same

The hash always starts with AB923D

The left most portion of the hash is always the same

A portion of the hash will be all 0's

When discussing passwords, what is considered a brute force attack?

You attempt every single possibility until you exhaust all possible combinations or discover the password

You threaten to use the rubber hose on someone unless they reveal their password

You load a dictionary of words into your cracking program

You create hashes of a large number of words and compare it with the encrypted passwords

You wait until the password expires

While examining audit logs, you discover that people are able to telnet into the SMTP server on port 25. You would like to block this, though you do not see any evidence of an attack or other wrong doing. However, you are concerned about affecting the normal functionality of the email server.From the following options choose how best you can achieve this objective?

Shut off the SMTP service on the server.

Force all connections to use a username and password.

Switch from Windows Exchange to UNIX Sendmail.

Windows LAN Manager (LM) hashes are known to be weak.Which of the following are known weaknesses of LM? (Choose three.)

Converts passwords to uppercase.

Hashes are sent in clear text over the network.

Effective length is 7 characters.

Converts passwords to uppercase.

Hashes are sent in clear text over the network.

Makes use of only 32-bit encryption.

Effective length is 7 characters.

An attacker runs netcat tool to transfer a secret file between two hosts. He is worried about information being sniffed on the network.How would the attacker use netcat to encrypt the information before transmitting onto the wire?

Machine A: netcat -l -p -s password 1234 < testfileMachine B: netcat 1234

Machine A: netcat -l -e magickey -p 1234 < testfileMachine B: netcat 1234

Machine A: netcat -l -p 1234 < testfile -pw passwordMachine B: netcat 1234 -pw password

Graphical Identification and Authentication DLL

Gateway Interface Network Application

GUI Installed Network Application CLASS

Global Internet National Authority (G-USA)

Graphical Identification and Authentication DLL

ECCouncil 312-50v12 Practice Test 4 - Free Online Exam Prep & Questions

Under what conditions does a secondary name server request a zone transfer from a primary name server?

A.

When a primary SOA is higher that a secondary SOA

B.

When a secondary SOA is higher that a primary SOA

C.

When a primary name server has had its service restarted

D.

When a secondary name server has had its service restarted

E.

When the TTL falls to zero

ECCouncil 312-50v12 Practice Test 4

Question

ECCouncil 312-50v12 Practice Tests

Practice Tests